Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update docker base images and python packages #1124

Open
wants to merge 10 commits into
base: release/2.3.10
Choose a base branch
from

Conversation

sambles
Copy link
Contributor

@sambles sambles commented Oct 21, 2024

Update docker base images and python packages

  • Update docker base images to ubuntu LTS 24.04
  • regenerate python package requirements files

# via virtualenv
django==3.2.23
django==3.2.25

Check notice

Code scanning / Trivy

python-django: Potential user email enumeration via response status on password reset Low

Package: django
Installed Version: 3.2.25
Vulnerability CVE-2024-45231
Severity: MEDIUM
Fixed Version: 5.1.1, 5.0.9, 4.2.16
Link: CVE-2024-45231
@sambles
Copy link
Contributor Author

sambles commented Oct 25, 2024

Failing compatibility checks is due to a change in group UUID's

Error - Worker logs

raised unexpected: PermissionError(13, 'Permission denied')
Traceback (most recent call last):
  File "/home/worker/.local/lib/python3.10/site-packages/celery/app/trace.py", line 477, in trace_task
    R = retval = fun(*args, **kwargs)
  File "/home/worker/.local/lib/python3.10/site-packages/celery/app/trace.py", line 760, in __protected_call__
    return self.run(*args, **kwargs)
  File "/home/worker/.local/lib/python3.10/site-packages/celery/app/autoretry.py", line 60, in run
    ret = task.retry(exc=exc, **retry_kwargs)
  File "/home/worker/.local/lib/python3.10/site-packages/celery/app/task.py", line 736, in retry
    raise_with_context(exc)
  File "/home/worker/.local/lib/python3.10/site-packages/celery/app/autoretry.py", line 38, in run
    return task._orig_run(*args, **kwargs)
  File "/home/worker/src/model_execution_worker/distributed_tasks.py", line 464, in run
    raise error
  File "/home/worker/src/model_execution_worker/distributed_tasks.py", line 460, in run
    return fn(self, params, *args, analysis_id=analysis_id, run_data_uuid=run_data_uuid, **kwargs)
  File "/home/worker/src/model_execution_worker/distributed_tasks.py", line 500, in prepare_input_generation_params
    params['log_location'] = filestore.put(kwargs.get('log_filename'))
  File "/home/worker/src/model_execution_worker/storage_manager.py", line 346, in put
    return self._store_file(
  File "/home/worker/src/model_execution_worker/storage_manager.py", line 119, in _store_file
    shutil.copyfile(file_path, stored_fp)
  File "/usr/lib/python3.10/shutil.py", line 256, in copyfile
    with open(dst, 'wb') as fdst:
PermissionError: [Errno 13] Permission denied: '/shared-fs/88082e41b0c84d12b2b788ca1f2b0279.log'

Prev image

oasis-worker(2.3.9) afcc55314351 ~ $ cat /etc/group 
root:x:0:
 ... 
users:x:100:
nogroup:x:65534:
worker:x:1000:

PR images

 $ cat /etc/group
root:x:0:
   ...
ubuntu:x:1000:
worker:x:1001:

@sambles sambles self-assigned this Oct 25, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
Status: No status
Development

Successfully merging this pull request may close these issues.

1 participant